diff --git a/README.md b/README.md
index 32cc243..a9db435 100644
--- a/README.md
+++ b/README.md
@@ -27,12 +27,13 @@ docker-compose up --build
 There are external components to this template referred to as "microservices". These can be omitted entirely by simply removing the React component that accesses them.
 
 * News Server: https://github.com/krgamestudios/news-server
+* Auth Server: https://github.com/krgamestudios/auth-server
 * Chat Server: https://github.com/krgamestudios/chat-server
 
 # TODO list
 
 - Account system
-	- A separate user settings page
+	- A separate authentication server
 - Administration Panel
 	- inspect aggregate user data
 	- Moderation tools for banning, suspending, or chat-banning users
diff --git a/server/admin/bookkeeper.js b/server/admin/bookkeeper.js
index 232a4a3..b9015aa 100644
--- a/server/admin/bookkeeper.js
+++ b/server/admin/bookkeeper.js
@@ -21,6 +21,7 @@ const defaultAdminAccount = async () => {
 			hash: await bcrypt.hash('password', await bcrypt.genSalt(11))
 		});
 
+		//TODO: (1) Replace this default admin account password with UUID
 		console.log(`Created default admin account (email: admin@${process.env.WEB_ADDRESS}; password: password)`);
 	}
 };
diff --git a/server/admin/index.js b/server/admin/index.js
index f10eb9b..bbf9630 100644
--- a/server/admin/index.js
+++ b/server/admin/index.js
@@ -4,7 +4,7 @@ const router = express.Router();
 //middleware
 router.use((req, res, next) => {
 	//make sure the account is an admin
-	if (req.cookies['admin'] !== process.env.SESSION_ADMIN) {
+	if (req.cookies['admin'] !== process.env.SESSION_ADMIN) { //TODO: Eew not good.
 		return res.status(401).send('invalid admin status');
 	} else {
 		next();